Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json)
Hash identifier: ibH6+azerHm5i6+4xx1m+ztWhg6OQMsqBTNoE9TImv0=
Subject key identifier: 18:D5:8A:F0:4B:2D:71:C6:8B:40:E8:21:40:63:47:AA:C1:7B:3F:4B
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 019A01B4DC8DA3067EFC79B0D330338F92C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 13:00:21 +0000
Manifest this update: Mon 20 Oct 2025 13:00:21 +0000
Manifest next update: Tue 21 Oct 2025 13:00:21 +0000
Files and hashes: 1: HSzy_sdTpMM9eJp_2_sbD1IEYy0.roa (hash: ieQeEh5XwIx3cGbKm9ddEXjqNduJq3qUmYGe9bdZpCY=)
2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: wW5GqNtEtCOoj2yZDXoFE2TShCjqff9FsKAvCqK6Rdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:dc:8d:a3:06:7e:fc:79:b0:d3:30:33:8f:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Oct 20 13:00:21 2025 GMT
Not After : Oct 21 13:00:21 2025 GMT
Subject: CN=18d58af04b2d71c68b40e821406347aac17b3f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:da:2c:a4:f1:6c:31:ab:d9:a7:ba:98:00:
d5:5e:a6:8c:7c:b0:92:62:c6:b1:20:d7:43:58:dc:
2d:70:22:89:78:93:2f:14:e6:2c:21:aa:8a:2a:fb:
44:41:8f:85:81:69:af:45:70:07:f1:ea:aa:2b:65:
1f:60:b0:1e:36:57:d4:8e:59:48:3c:30:a1:88:00:
32:b0:60:e2:e2:e1:ac:45:da:ac:6b:4a:26:12:26:
58:c8:d8:01:b6:56:e1:95:1b:22:e9:97:1d:69:32:
6f:01:e7:54:49:e6:d4:ff:8e:c9:79:33:68:54:8f:
07:2e:b0:16:d7:92:b0:81:e3:09:19:0c:44:7c:07:
c7:ea:11:80:5c:42:18:4c:27:cb:70:3c:05:80:4a:
f1:c3:c7:b6:cd:84:69:f6:d8:e2:93:1c:f0:4a:95:
77:7c:ce:87:65:b9:b9:d0:81:50:2b:99:02:67:d6:
aa:e6:82:ce:12:d0:cc:a7:b7:c1:0e:0a:2d:9d:53:
fd:1b:e9:32:1e:ef:17:bb:35:ae:b5:48:ce:34:b5:
85:0e:c1:5a:ce:e6:f3:98:47:6d:66:ff:0c:8b:b8:
3f:e9:8a:04:ae:9f:3d:1d:cb:c1:87:cf:7c:0f:04:
9d:dc:4e:4a:13:a4:49:91:1c:a7:bb:33:1b:a3:11:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D5:8A:F0:4B:2D:71:C6:8B:40:E8:21:40:63:47:AA:C1:7B:3F:4B
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8c:9c:05:9a:17:1d:76:da:55:91:28:cc:13:e5:11:0c:cc:
67:5c:b0:fb:a2:40:be:a4:01:40:24:e6:5b:96:31:b5:bf:a6:
6e:b1:73:bb:10:64:af:0f:e6:e3:58:4e:44:b9:e9:82:99:86:
fd:09:e4:24:34:54:0a:99:5e:ec:1c:53:f0:aa:cb:17:4d:36:
57:73:6b:a6:2b:15:4e:75:68:79:02:ba:21:1f:f1:46:29:7f:
c8:72:48:7d:66:64:1a:d7:64:11:7f:e2:ec:7e:cc:02:fd:d7:
3a:c5:a0:8c:54:79:1e:87:e9:4b:55:72:87:92:57:92:03:f2:
fc:2a:d6:0e:e5:55:c9:20:0c:b1:39:7b:9b:08:d3:f5:60:5b:
1c:89:c2:8c:30:0a:c8:eb:bb:2c:62:90:71:d7:51:85:71:37:
13:1f:f0:07:6a:db:16:8c:5c:98:27:16:25:bb:7d:5b:6d:17:
f3:06:ee:da:54:58:65:c0:c6:ca:d5:22:60:5f:8e:7a:70:5b:
2a:0e:ae:a6:8a:e7:f3:e0:96:0b:70:6f:6f:ab:d6:87:de:6c:
f1:ae:c8:b0:08:14:e2:6e:0e:0d:36:04:01:9b:50:af:f3:93:
63:64:1d:ed:7f:b4:fd:4d:8f:bd:89:8e:39:07:dd:b7:ff:a8:
f8:df:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:36:39 2025 by rpki-client